1487124 matches found
BadBlood
BadBlood BadBlood by Secframe fills a Microsoft Active Directory Domain with a structure and thousands of objects. The output of the tool is a domain similar to a domain in the real world. After BadBlood is ran on a domain, security analysts and engineers can practice using tools to gain an...
masq
Sit where the model sits. See what it can see. MASQ MASQ is a local security CLI for AI agent stacks. It sits in the same seat the model sits in: it reads MCP tool catalogs, completes the MCP handshake, looks through session logs, and probes local model HTTP ports. Then it prints findings and...
skf-flask
OLD and archived Security Knowledge Framework Please note that this is the archived version of SKF, we are busy building a brand new Security Knowledge Framework. For more updates please visit this github repo: https://github.com/Security-Knowledge-Framework/Platform...
CVE-2022-22978
CVE 2022-22978: Authorization Bypass in RegexRequestMatcher ๐ฅถ Overview According to the information I have gathered, this vulnerability relates to the RegexRequestMatcher class in the Spring Security framework. Specifically, applications using RegexRequestMatcher where the regular expression...
oracle-weblogic-CVE-2021-2109
oracle-weblogic-CVE-2021-2109 Oracle Weblogic RCE - CVE-2022-2109...
CVE-2026-87744
A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers to bypass security controls on generated endpoints. When a developer customizes a specific operation using @MethodProperties without explicitly re-declaring security roles, the code generator silent...
CVE-2019-15107
CVE-2019-15107 http://0-sec.org...
shootback
shootback shootback is a reverse TCP tunnel let you access target behind NAT or firewall ๅๅTCP้ง้, ไฝฟๅพNATๆ้ฒ็ซๅขๅ็ๅ ็ฝๆบๅจๅฏไปฅ่ขซๅค็ฝ่ฎฟ้ฎ. Consumes less than 1% CPU and 8MB memory under 800 concurrency. slaver is single file and only depends on python2.7/3.4+ standard library. How it works Typical Scene 1. Access...
Damn-Vulnerable-Drone
Damn Vulnerable Drone The Damn Vulnerable Drone is an intentionally vulnerable drone hacking simulator based on the popular ArduPilot/MAVLink architecture, providing a realistic environment for hands-on drone hacking. Table of Contents About the Damn Vulnerable Drone What is the Damn Vulnerable...
inql
InQL v6.1.2 - Burp Extension for Advanced GraphQL Testing !Doyensec Research...
DongTai
DongTai ไธญๆ็ๆฌChinese version About DongTai IAST Dongtai IAST is an open-source Interactive Application Security Testing IAST tool that enables real-time detection of common vulnerabilities in Java applications and third-party components through passive instrumentation. It is particularly suitable...
AzureAD-Attack-Defense
Attack and Defense Playbook for Microsoft Entra This publication is a collection of various common attack scenarios on Microsoft Entra and how they can be mitigated or detected. All of the included scenarios, insights and comments are based on experiences from the contributors during their attack...
exim-vuln-poc
CVE-2018-6789...
WPKiller
WPKiller v1.0 โ Wordpress Security Scanner, WPKiller Allows you to search for vulnerabilities on the Wordpress site as well as scan Plugins and find Exploit customized versions and Plugins Installation How to install this tool? $ git clone https://github.com/Dark-Grizzly/WPKiller $ cd WPKiller $...
medusa
๐ MEDUSA - AI Security Scanner AI-first security scanner with 40,000+ detection patterns for AI/ML, agents, and LLM applications. ๐ค Works out of the box - no tool installation required. ๐จ 200 CVEs: Log4Shell, Spring4Shell, XZ Utils, LangChain RCE, MCP-Remote RCE, React2Shell ๐ฅmedusa scan --git โ...
AppSecEzine
AppSec Ezine Raising awareness towards the prevention of security risks is challenging. Most people are unaware of or just donโt have access to the right information. Keeping up the pace in the tech world is a golden rule. If you are not ready to deal with security issues, you are heading in the...
harpoon
Harpoon / / / / / // / / / / / / \ / / // / / / // / // / // / / / / // //,// / .//// // // , , "o" o -- -- o / \ o / \ \o / / | X | / / \ / / \ \ / / / -. .- A collection of scripts and payloads and such for hacking containers and k8s junk...
terminal-bench-2
Terminal-Bench 2.0 | | | | || || | |/ \ '| ' | | ' \ / | | || || | | / | | | | | | | | | | | | | | || || |||| || || |||| ||,|| |||| || | | | | \ / \ \\ | \ / \ ' \ / | ' \ || | | | \\ | | | / | | | | | | | / / | || | \ \ |/ || |||| || |/ \\ Terminal-Bench is a popular benchmark for...
tailsnitch
Tailsnitch A security auditor for Tailscale configurations. Tailsnitch scans your tailnet for 57 misconfigurations, overly permissive access controls, and security best practice violations. Quick Start 1. Set your Tailscale API credentials export TSAPIKEY="tskey-api-..." 2. Run audit tailsnitch 3...
CaA
Insight into information, exploring with intelligence in a thousand ways. First Author: EvilChen Second Author: 0chenccMystery Security Team Third Author: MingXiMystery Security Team README Version: English | ็ฎไฝไธญๆ Project Introduction CaA is an auxiliary project in the field of cybersecurity...